Cyber Security Engineer (Jr-Sr)

aqua IT • St Louis, MO

20h

About The Position

This role focuses on cybersecurity engineering, risk management, and compliance across cloud and on-prem systems, supporting system authorization, vulnerability management, and secure operations in classified environments. We have several openings at multiple levels (Jr-Sr).

Requirements

• US citizenship with Active or Current TS/SCI clearance
• Bachelor’s degree with 5+ years of experience (or equivalent experience)
• DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
• Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM)
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening
• Knowledge of NIST 800-series publications and incident response processes
• Strong analytical, communication, and collaboration skills

Nice To Haves

• Scripting or development experience (Python, Java, React)
• DevSecOps tools and pipeline experience
• Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
• Familiarity with Agile environments and tools (Jira, Confluence)
• Experience with NIST SP 800-171 and System Security Engineering (SSE)

Responsibilities

• Applying RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
• Developing, reviewing, and maintaining security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
• Conducting vulnerability assessments and compliance scans (e.g., ACAS) and tracking remediation of findings and IAVM requirements
• Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
• Supporting system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
• Monitoring systems for security events and supporting incident response and risk mitigation activities
• Assessing security impacts of system changes and supporting configuration control boards (CCBs)
• Collaborating with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
• Providing cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level